This article only pertains to owners of Aptora Mobile II that do their own hosting of the software (on-premises). If you are an Aptora Hosted client, you do not need to worry about any of this. We take care of all of this for you.
Mobile SSL Certification
Aptora Mobile II® requires SSL protection. In order to maintain compliance with processing credit cards in Aptora Mobile II®, a valid SSL certificate is required. This is also important for your company’s overall security since Aptora Mobile II is exposed to the internet.
What is SSL?
SSL stands for Secure Socket Layer Certificate. SSL is a secure protocol developed for sending information securely over the Internet. Many websites use SSL for secure areas of their sites, such as user account pages and online checkout. SSLs help to ensure that all data passed between the web server and browser remain private. SSL certificates and installed on server computers, including the server computer where Aptora Mobile II is installed.
When you visit a website that uses an SSL certificate, the URL will start with https://
The Google Chrome browser now labels all websites not using HTTP encryption as “not secure”. If they haven’t already done so, other browsers will do the same.
Purchase and Install an SSL Certificate
Aptora cannot sell SSLs. This is a highly specialized service, usually offered by internet hosting companies. Please contact GoDaddy.com or any company of your choice.
Installing an SSL on your Aptora Mobile II server is required and is usually done by an IT professional. The work is not difficult (for a professional) and usually takes less than one hour. Aptora cannot assist you with this effort.
Test Website for SSL Problems
If you have tried to install an SSL certificate but your website indicates that you are not protected, you should consider scanning that website with an SSL scanner. You can search “Why No Padlock” or “SSL Scanner” to see your options. We have used this one successfully. This is one of the best all-in-one website SSL checking tools we have used.
Their verification algorithm checks that all intermediate chain certificates are installed correctly. If they are not, then the SSL certificate is actually not installed correctly. Many web browsers will still show the padlock, but some browsers that are set to high security will not see the site as secure.
Enable TLS on Browsers
To further protect your website against cyber-attacks, we recommend users enable TLS 1.2 on the mobile server computer as well as on any browser that accesses the mobile website. For more information on enabling TLS 1.2, please review the following links:
Enabling TLS 1.1 and TLS 1.2 on Web Browsers
Aptora Mobile II® Requires SSL Protection
If your mobile site does not contain an SSL Certificate, you will not be able to process credit cards. You may also have trouble accessing and using the product. All major browsers recommend SSL protection for all websites, even those without sensitive information.
For questions on obtaining an SSL certificate, please contact your IT professional.